The unofficial HackerOne disclosure Timeline

Node.js third-party modules disclosed a bug submitted by skyn3t
[takeapeek] XSS via HTML tag injection in directory lisiting page

01 Jul 2019 timeline

curl disclosed a bug submitted by mirchr
Windows Privilege Escalation: Malicious OpenSSL Engine

29 Jun 2019 timeline

ICQ disclosed a bug submitted by n4sty
Stored xss on message reply

29 Jun 2019 timeline

ICQ disclosed a bug submitted by n4sty
[web.icq.com] Stored XSS in "? ????????"

29 Jun 2019 timeline

Slack disclosed a bug submitted by hanno
Invitation reminder emails contain insecure links

29 Jun 2019 timeline

HackerOne disclosed a bug submitted by haxta4ok00
Disclosing a private program in an external link if program is paused

28 Jun 2019 timeline

Omise disclosed a bug submitted by honoki
SSRF in webhooks leads to AWS private keys disclosure

28 Jun 2019 timeline

Shopify disclosed a bug submitted by mosuan
Stored XSS in Discounts section

27 Jun 2019 timeline

Nextcloud disclosed a bug submitted by frr
Expired reshare links allow access to all files in share

27 Jun 2019 timeline

TomTom disclosed a bug submitted by vijay922
Apache mod_status /server-status Information Disclosure

27 Jun 2019 timeline

Nextcloud disclosed a bug submitted by sjw
Stored XSS/HTML injection in autocomplete suggestions for sharing

27 Jun 2019 timeline

Nextcloud disclosed a bug submitted by fancycode
Uploading large avatar images cause excessive CPU usage

27 Jun 2019 timeline

Nextcloud disclosed a bug submitted by nickvergessen
Private/confidential setting of calendar events is ignored on activity stream

27 Jun 2019 timeline

Homebrew disclosed a bug submitted by hi_ztz
Homebrew privilege escalation vulnerability

27 Jun 2019 timeline

HackerOne disclosed a bug submitted by metnew
Team member with Program permission only can escalate to Admin permission

26 Jun 2019 timeline

OLX disclosed a bug submitted by codeslayer137
SQL Injection https://www.olx.co.id

26 Jun 2019 timeline

Nextcloud disclosed a bug submitted by mru1
Predictable Random Number Generator

26 Jun 2019 timeline

Nextcloud disclosed a bug submitted by doragon
Retrieval and alteration of exposed media on Android Oreo

26 Jun 2019 timeline

Cuvva disclosed a bug submitted by badcracker
Unclaimed facebook page at www.cuvva.com/about

25 Jun 2019 timeline

Upserve disclosed a bug submitted by gamer7112
DOM Based XSS via postMessage at https://inventory.upserve.com/login/

25 Jun 2019 timeline

1 ... 3 4 5 6 7 ... 350

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.